セキュリティの基礎とインシデントレスポンス / Security Fundamentals and Incident Response

早稲田大学大学院経営管理研究科「サイバーセキュリティ」2026 夏の第3-4回で使用したスライドです。

Transcript

1. Generated by Stable Image Core 2026 3-4 (WBS) 2026 3-4 — 2022-06-15 – p.1/34
2. https://speakerdeck.com/ks91/collections/cyber-security-2026-summer 2026 3-4 — 2022-06-15 – p.2/34
3. ( ) 1 6 8 (1) • 2 6 8 (2) • 3 6 15 (1) • 4 6 15 (2) • 5 6 22 I (1) ( ) 6 6 22 I (2) ( ) 7 6 29 (1) ( ) 8 6 29 (2) ( ) 9 7 6 (1) 10 7 6 (2) 11 7 13 (1) 12 7 13 (2) 13 7 20 II (1) ( ) 14 7 20 II (2) ( ) W-IOI / ( ) 2026 3-4 — 2022-06-15 – p.3/34
4. ( 20 ) 1 • 2 • 3 • 4 (TCP/IP ) • 5 • 6 • 7 • 8 • 9 • 10 World Wide Web • 11 Web API • 12 • 13 git GitHub • 14 • / / OK / 2026 3-4 — 2022-06-15 – p.4/34
5. ( ) ( ) 2026 3-4 — 2022-06-15 – p.5/34
6. + — ( (1a), (1b), (2)) + ( (3)) 2026 3-4 — 2022-06-15 – p.6/34
7. 2026 3-4 — 2022-06-15 – p.7/34
8. 1. (1) (2) 2026 6 11 ( ) 23:59 JST Waseda Moodle (Q & A ) 2026 3-4 — 2022-06-15 – p.8/34
9. . . . . . . 28 27 (6/12( ) ) ( ) 2026 3-4 — 2022-06-15 – p.9/34
10. M AI AI AI ⇒ AI ( AI) AI AI ( ) ( ) ( ) 2026 3-4 — 2022-06-15 – p.10/34
11. N Weakest link ⇒ : 2 2026 3-4 — 2022-06-15 – p.11/34
12. S ⇒ 2026 3-4 — 2022-06-15 – p.12/34
13. S ( ) ⇒ 7-8 2026 3-4 — 2022-06-15 – p.13/34
14. T 2026 3-4 — 2022-06-15 – p.14/34
15. 3 ( ) ( ) ( ) 2026 3-4 — 2022-06-15 – p.15/34
16. ( ) : Wi-Fi etc. (Confidentiality) (Integrity) (Availability) 2026 3-4 — 2022-06-15 – p.16/34
17. ( +α) : . . . ( ) . . . ( . . . ) ( ( )) . . . ( ) × → 2026 3-4 — 2022-06-15 – p.17/34
18. (Gold Standard of Security) (Authentication) ( ) ID / , , , , , , etc. (Authorization) ( ) , , sudoers, etc. (Audit) ( ) , , ( ), etc. 2026 3-4 — 2022-06-15 – p.18/34
19. (1a) : 1 ( ) (a) URL X 1. 2. ( ) 3. 2026 3-4 — 2022-06-15 – p.19/34
20. (1b) : 2 ( ) (b) ( ) 1. 2. ( ) 3. 2026 3-4 — 2022-06-15 – p.20/34
21. (2) : PPAP PPAP Password ( ) Passowrd ( ) A ( ) Protocol ( ) PPAP PPAP 2026 3-4 — 2022-06-15 – p.21/34
22. NICT CYDER https://cyder.nict.go.jp (3) : 2026 3-4 — 2022-06-15 – p.22/34
23. Πϯγσϯτͷ༧ஹͳͲ ॳಈରԠ ෮چાஔ
    ࢑ఆରԠ ࠶ൃ๷ࢭࡦ
    ߃ٱରԠ ݕ౼ ࣄޙରԠ τϦΞʔδ ใ ࠂ ɾ ެ ද Π ϯ γ σ ϯ τ ϋ ϯ υ Ϧ ϯ ά Π ϯ γ σ ϯ τ Ϩ ε ϙ ϯ ε ސ ٬ ɾ ެ ڞ ݕ஌ɾड෇ ରԠํ਑ݕ౼ 1PJOU
    PG
    $POUBDU ূڌอશ ෧͡ࠐΊ ࠜઈ , , DoS , , etc. 2026 3-4 — 2022-06-15 – p.23/34
24. Point of Contact (PoC) 1 2026 3-4 — 2022-06-15 – p.24/34
25. 2026 3-4 — 2022-06-15 – p.25/34
26. HDD ( ) 2026 3-4 — 2022-06-15 – p.26/34
27. 2026 3-4 — 2022-06-15 – p.27/34
28. ( ) 2026 3-4 — 2022-06-15 – p.28/34
29. ( ) JPCERT/CC, NISC, ( ) ( ) 2026 3-4 — 2022-06-15 – p.29/34
30. (1 ) 2026 3-4 — 2022-06-15 – p.30/34
31. (3) : 70 1,000 X 3 1. 2. 3. 3 2026 3-4 — 2022-06-15 – p.31/34
32. 2026 3-4 — 2022-06-15 – p.32/34
33. 2. OK (1) (2) 2026 6 18 ( ) 23:59 JST Waseda Moodle (Q & A ) 2026 3-4 — 2022-06-15 – p.33/34
34. I 2026 3-4 — 2022-06-15 – p.34/34